Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8A916A0B6A111F1B2B0A7FBCE1D38B0.roa
File:                     B8A916A0B6A111F1B2B0A7FBCE1D38B0.roa (raw, json)
Hash identifier:          oun1AjItzNaxanliiUuQPkzZHuzOFtGnW6FSOAhVaWM=
Subject key identifier:   83:B7:D6:BD:E6:49:17:1C:DF:42:5D:87:B2:4B:D8:C7:E9:32:32:BB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D83C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8A916A0B6A111F1B2B0A7FBCE1D38B0.roa
Signing time:             Tue 22 Sep 2026 16:21:53 +0000
ROA not before:           Tue 22 Sep 2026 16:21:49 +0000
ROA not after:            Thu 29 Oct 2026 16:21:49 +0000
asID:                     48031
IP address blocks:        45.200.181.0/24 maxlen: 24
                          45.200.182.0/24 maxlen: 24
                          45.200.183.0/24 maxlen: 24
                          45.200.184.0/24 maxlen: 24
                          45.200.185.0/24 maxlen: 24
                          45.200.186.0/24 maxlen: 24
                          45.200.187.0/24 maxlen: 24
                          45.200.188.0/24 maxlen: 24
                          45.200.189.0/24 maxlen: 24
                          45.200.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120892 (0x1d83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 16:21:49 2026 GMT
            Not After : Oct 29 16:21:49 2026 GMT
        Subject: CN=6ab2ab21-39ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:c9:84:91:40:b2:87:b4:1f:37:13:07:20:
                    e2:ff:06:ea:8b:28:ac:35:9a:f2:27:fa:57:d8:bc:
                    c8:a4:62:0e:49:26:fc:40:22:a3:cc:30:66:cd:9d:
                    b3:85:55:05:c0:b0:ba:9e:40:cb:55:09:b4:24:67:
                    a0:ae:84:80:5d:50:24:ca:a0:a8:5f:b1:cb:32:b7:
                    6c:3d:55:20:19:de:ac:0a:85:f1:b8:34:92:72:0f:
                    44:23:e0:99:aa:94:b3:70:15:d5:ef:43:35:e5:1b:
                    fd:dc:9e:83:3c:2e:e7:da:39:df:69:27:c3:f8:a6:
                    3c:c3:b9:79:a0:26:0f:f6:07:81:b8:9f:ed:7a:81:
                    68:bb:31:3b:50:28:b1:7f:d2:b4:1c:ea:45:e0:fc:
                    b7:43:de:3f:d0:01:90:15:c2:f8:9d:36:e4:0e:99:
                    03:72:e1:55:45:b2:eb:60:fa:a5:29:89:2c:4d:a7:
                    e5:40:91:3c:f2:1b:58:d0:8a:4b:fc:60:f3:77:27:
                    07:72:f8:4d:1f:c5:b9:77:fe:18:7f:4f:83:de:8a:
                    94:df:c5:6a:b3:bc:f5:97:05:73:e9:b9:5b:5e:1e:
                    2b:53:77:94:66:42:2a:73:7f:57:1f:bf:f9:93:17:
                    d1:f1:7c:19:3f:70:02:b2:23:a8:8c:90:c6:99:9b:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B7:D6:BD:E6:49:17:1C:DF:42:5D:87:B2:4B:D8:C7:E9:32:32:BB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8A916A0B6A111F1B2B0A7FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.181.0-45.200.190.255

    Signature Algorithm: sha256WithRSAEncryption
         78:14:3d:c5:58:a1:8e:25:79:01:56:f4:99:5f:aa:a8:05:13:
         f7:74:75:b1:fb:f2:7c:00:ee:39:8c:58:42:83:88:cc:75:63:
         66:21:e2:04:82:67:be:d9:2d:24:39:f2:8d:f8:ce:f9:7a:08:
         90:9b:ef:12:2c:9a:e0:ab:00:82:7d:b1:fc:d4:aa:f5:72:4d:
         86:7d:b2:8d:6e:eb:26:67:59:4a:13:b5:c6:96:2c:73:9c:e7:
         98:92:93:a1:70:64:63:54:3e:37:a8:c7:dd:72:7f:31:4d:f5:
         0e:65:a4:f0:b2:69:2d:56:a2:cb:17:a6:3d:20:ab:d4:1d:2a:
         77:2a:02:48:64:9e:0f:a1:1e:9e:a1:d9:f6:7b:c0:c1:a7:1b:
         5f:95:eb:8f:75:f6:9f:5e:3b:b8:52:ec:3c:e3:9f:53:20:12:
         a7:e1:e1:fd:c7:61:8e:76:be:38:e0:63:65:c4:27:db:af:42:
         1f:d5:ef:da:d8:a5:9d:bc:81:5d:04:a4:7c:79:32:db:b3:68:
         ee:82:24:84:d3:00:9a:6a:15:35:f9:29:92:c8:3f:ec:b5:15:
         13:40:09:73:b7:af:00:29:36:ff:9d:6d:8b:79:bf:0c:8a:1f:
         13:30:e6:f7:68:eb:08:27:96:31:5a:b0:2b:ff:ef:8f:e8:63:
         98:bc:7a:6e
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdg8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIyMTYyMTQ5WhcNMjYxMDI5MTYyMTQ5WjAYMRYw
FAYDVQQDEw02YWIyYWIyMS0zOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqy7JhJFAsoe0HzcTByDi/wbqiyisNZryJ/pX2LzIpGIOSSb8QCKjzDBm
zZ2zhVUFwLC6nkDLVQm0JGegroSAXVAkyqCoX7HLMrdsPVUgGd6sCoXxuDSScg9E
I+CZqpSzcBXV70M15Rv93J6DPC7n2jnfaSfD+KY8w7l5oCYP9geBuJ/teoFouzE7
UCixf9K0HOpF4Py3Q94/0AGQFcL4nTbkDpkDcuFVRbLrYPqlKYksTaflQJE88htY
0IpL/GDzdycHcvhNH8W5d/4Yf0+D3oqU38Vqs7z1lwVz6blbXh4rU3eUZkIqc39X
H7/5kxfR8XwZP3ACsiOojJDGmZssPwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIO3
1r3mSRcc30Jdh7JL2MfpMjK7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9COEE5MTZBMEI2QTExMUYxQjJCMEE3RkJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtyLUDBAAtyL4wDQYJKoZI
hvcNAQELBQADggEBAHgUPcVYoY4leQFW9JlfqqgFE/d0dbH78nwA7jmMWEKDiMx1
Y2Yh4gSCZ77ZLSQ58o34zvl6CJCb7xIsmuCrAIJ9sfzUqvVyTYZ9so1u6yZnWUoT
tcaWLHOc55iSk6FwZGNUPjeox91yfzFN9Q5lpPCyaS1WossXpj0gq9QdKncqAkhk
ng+hHp6h2fZ7wMGnG1+V64919p9eO7hS7Dzjn1MgEqfh4f3HYY52vjjgY2XEJ9uv
Qh/V79rYpZ28gV0EpHx5MtuzaO6CJITTAJpqFTX5KZLIP+y1FRNACXO3rwApNv+d
bYt5vwyKHxMw5vdo6wgnljFasCv/74/oY5i8em4=
-----END CERTIFICATE-----